Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/323830343a333231383a3a2f33322d3332203d3e20323635303535.roa
File:                     323830343a333231383a3a2f33322d3332203d3e20323635303535.roa (raw, json)
Hash identifier:          fyW1YtP+rR7i1kyfbd5Wy10TOF8HF377oontlXCZSvY=
Subject key identifier:   8F:EB:95:EC:83:1C:24:5C:B1:F1:F5:AE:32:CA:C8:37:0B:75:92:C5
Certificate issuer:       /CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
Certificate serial:       4A217284597CD1F807E19E888954D3674E16A7D3
Authority key identifier: A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/323830343a333231383a3a2f33322d3332203d3e20323635303535.roa
Signing time:             Wed 06 Nov 2024 19:56:46 +0000
ROA not before:           Wed 06 Nov 2024 19:51:46 +0000
ROA not after:            Wed 05 Nov 2025 19:56:46 +0000
asID:                     265055
IP address blocks:        2804:3218::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl
                          rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:21:72:84:59:7c:d1:f8:07:e1:9e:88:89:54:d3:67:4e:16:a7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
        Validity
            Not Before: Nov  6 19:51:46 2024 GMT
            Not After : Nov  5 19:56:46 2025 GMT
        Subject: CN=8FEB95EC831C245CB1F1F5AE32CAC8370B7592C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:41:b1:e9:91:6e:69:80:3a:d6:03:7a:81:a2:
                    26:b6:df:27:92:95:2f:c9:81:96:cc:6e:26:d4:de:
                    2b:58:3e:76:0e:da:20:2a:93:b9:53:c3:5b:4e:fc:
                    d5:ab:30:91:1f:b7:95:a8:16:a1:0b:0a:70:bc:1c:
                    89:b9:e9:f4:01:9d:5f:09:8a:dc:2d:63:9e:01:62:
                    98:2e:fb:ee:0c:e0:9a:ae:11:e0:29:a5:7b:38:fe:
                    3e:da:a7:6b:db:7e:f9:fd:07:4b:d1:28:3c:5c:94:
                    f9:b4:a1:d5:18:5d:c6:15:72:63:0a:14:f1:cc:eb:
                    d1:5e:30:b3:0a:20:81:fe:55:a1:cb:eb:a0:95:a1:
                    26:e2:d8:db:ff:cc:01:2f:ab:26:50:ad:51:33:d2:
                    45:71:f9:d1:93:39:89:a5:98:42:df:4f:c1:eb:d8:
                    8d:ab:43:43:fa:44:da:e6:b5:2b:e7:5c:c3:53:79:
                    06:d6:45:1a:91:ea:35:ad:fb:26:be:aa:7a:76:df:
                    07:54:05:a1:c7:15:b5:d2:60:c6:ad:17:00:e5:ef:
                    a3:14:74:6a:a3:c1:71:31:d9:5f:69:35:ae:15:40:
                    77:23:f4:2c:ba:38:b4:dd:ee:c2:12:a0:7e:b7:6d:
                    f5:62:b3:2e:a0:5a:e9:fd:06:fb:b6:b1:ec:d6:06:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EB:95:EC:83:1C:24:5C:B1:F1:F5:AE:32:CA:C8:37:0B:75:92:C5
            X509v3 Authority Key Identifier:
                keyid:A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/323830343a333231383a3a2f33322d3332203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3218::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:f4:80:2e:92:67:6b:8e:b9:34:24:2a:cd:5d:7b:65:06:
         9c:c8:c9:42:b0:92:ca:de:81:8d:cf:3a:7e:3e:bd:e1:d6:9f:
         0c:a1:6e:f4:ed:ac:7f:d4:d2:85:01:40:f7:35:9f:9a:d6:11:
         7b:d2:4c:ce:34:a4:46:a6:e4:87:41:ea:0d:1b:15:bd:6a:61:
         4f:1a:66:86:51:1e:57:68:a4:c4:a5:6d:7d:80:89:23:83:1b:
         a2:37:11:0d:18:e6:63:b4:aa:69:55:ae:dd:21:02:f3:28:ae:
         62:97:c7:9b:1b:f1:72:ce:ec:4f:71:61:11:1b:9b:3e:a2:f7:
         7e:54:41:37:79:11:f0:bd:70:24:bb:d4:7c:1b:47:9b:c3:a5:
         0a:ec:1d:f3:fa:90:61:eb:d8:1a:4a:5b:e4:4e:72:fe:39:35:
         dc:df:fb:63:b1:1d:ba:fb:85:1c:eb:9e:2b:e8:e0:45:65:8b:
         86:58:67:e5:82:dc:f7:83:d7:b3:3e:7b:43:d5:e3:18:9b:87:
         a8:46:d5:ca:e8:d2:af:ff:47:13:e4:ba:1d:bc:7b:a2:9a:53:
         cc:62:a7:a5:ea:66:2e:7d:f7:93:05:e8:fe:1c:19:90:2f:b7:
         cc:20:cc:a5:9a:52:4a:1d:8c:b7:f3:16:cd:96:4d:ba:d0:f7:
         58:e2:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:11 2025 by rpki-client